2026 CVE Vulnerabilities

78,942 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-23236MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kerne...
CVE-2026-23235HIGH7.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute r...
CVE-2026-23234HIGH7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As s...
CVE-2026-23233HIGH7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for...
CVE-2026-23232MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_ena...
CVE-2026-3103MEDIUM5.4A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL)...
CVE-2026-25907HIGH7.5Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unau...
CVE-2026-24732MEDIUM6.6Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability...
CVE-2026-23231HIGH7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tabl...
CVE-2026-22270MEDIUM6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled searc...
CVE-2026-21426MEDIUM6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn...
CVE-2026-21425HIGH7.8Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privileg...
CVE-2026-21424MEDIUM6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn...
CVE-2026-21423MEDIUM6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default ...
CVE-2026-21422MEDIUM6.7Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setti...
CVE-2026-21421MEDIUM6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unn...
CVE-2026-3058MEDIUM6.5The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, ...
CVE-2026-3056MEDIUM4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap...
CVE-2026-2355MEDIUM6.4The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `te...
CVE-2026-1674MEDIUM6.5The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress ...
CVE-2026-3439MEDIUM4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker...
CVE-2026-1706MEDIUM6.1The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter...
CVE-2026-3094HIGH7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an att...
CVE-2026-2748MEDIUM5.3SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses ...
CVE-2026-2747HIGH7.5SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now